Guide to FOIP-Chapter 6

Office of the Saskatchewan Information and Privacy Commissioner. Guide to FOIP, Chapter 6, Protection of Privacy. Updated 27 February 2023. 349 written policies and procedures. To ensure compliance, an organization may choose to require the service provider file documents showing an update to policies and procedures, logs, employee screening and access control. The service provider may offer verification of its current industry association certification status such as the National Association for Information Destruction (NAID) which may satisfy an organization’s auditing requirement for secure destruction. NAID Certification is a voluntary program offered to its members. The program consists of an annual audit conducted by one of a network of independent security professionals who are accredited by ASIS International as Certified Protection Professionals. Professionals audit the applicant against the security standards of the NAID Certification Program. The program also includes unannounced, random audits of NAID Certified locations by the same security professionals.835 Preserving Records The Provincial Archives provides records and information management services to the provincial government. The Information and Management Services Program is responsible for the development and dissemination of records and information management policies, procedures, standards, and guidelines. The program maintains the Administrative Records Management System 2014 (ARMS 2014), a standard for the classification and retention of administrative records. The program also provides records management advise and support to government institutions, including assistance in the development of Operational Records Systems (ORS).836 To ensure that government records are disposed of in an accountable manner, the Provincial Archives processes requests for the disposal of government records from government institutions. Requests are reviewed to confirm records’ eligibility for disposal under proper authority (ARMS 2014 or ORS) and to determine records’ historical value. Based on the 835 The sections above were adapted from ON IPC resource, Get rid of it Securely to keep it Private: Best Practices for the Secure Destruction of Personal Health Information, October 2009. Available at naid.pdf (ipc.on.ca). Accessed on December 17, 2022. 836 Provincial Archives of Saskatchewan, Government of Saskatchewan Records Disposal System. Available at Services for Government | Provincial Archives of Saskatchewan (saskarchives.com). Accessed December 19, 2022.

RkJQdWJsaXNoZXIy MTgwMjYzOA==